This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json) Hash identifier: ICij3c6fanNVzzoA9GQJ3jxO878p647nUfjmlOXod8A= Subject key identifier: 00:50:AA:52:3C:EF:DE:94:3A:B7:66:37:EB:D6:24:CC:1F:60:07:54 Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Certificate serial: 019B34204A7734787153B1211CFE7C73BC54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft Manifest number: 0E90 Signing time: Fri 19 Dec 2025 01:01:29 +0000 Manifest this update: Fri 19 Dec 2025 01:01:29 +0000 Manifest next update: Sat 20 Dec 2025 01:01:29 +0000 Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: iZ6e0BDUWuYAqUsEjTNq1loGmavrBSkKGuynrikxHhA=) 2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:4a:77:34:78:71:53:b1:21:1c:fe:7c:73:bc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Validity Not Before: Dec 19 01:01:29 2025 GMT Not After : Dec 20 01:01:29 2025 GMT Subject: CN=0050aa523cefde943ab76637ebd624cc1f600754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:53:72:ee:8d:f4:db:53:3b:d2:40:da:a7: d7:05:a9:7b:ca:60:d6:af:89:7a:40:6f:82:e8:a4: 39:72:ce:18:82:d3:55:fc:90:97:53:42:98:0b:81: 44:1c:7b:65:9f:1a:6b:78:05:6f:99:67:00:79:d3: ec:31:73:35:a2:7d:db:f5:1f:39:b8:8a:02:69:43: ac:63:3e:be:d6:29:1b:43:7e:67:ac:76:fb:66:cb: 50:d2:bf:8a:ee:b9:87:f2:fe:33:29:62:5d:ef:e9: 2a:4d:55:1c:c8:73:29:5a:8d:e8:68:d7:d3:0f:64: bf:ed:f2:12:a2:09:b0:95:aa:bc:10:9b:71:63:97: d6:80:af:d5:ce:94:3c:f7:2d:60:63:d1:07:83:ca: a2:41:3f:0a:f3:dd:99:7c:2b:a5:bd:c2:f5:64:a3: 72:c0:69:c5:61:61:95:1b:b7:be:c8:28:37:d0:5a: 4e:52:af:7c:78:9c:7f:1f:a0:71:69:9b:a6:a0:3c: 5b:43:ee:f3:a7:50:6e:ec:ba:f5:3c:d4:be:45:bd: 14:2c:8c:8e:0a:98:d3:71:5f:c8:44:6c:6e:02:28: a2:ba:6c:71:ed:1a:b0:f1:c4:ef:63:b7:99:d6:56: 0f:66:d0:0d:e8:9b:1c:aa:42:21:17:d9:67:55:77: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:AA:52:3C:EF:DE:94:3A:B7:66:37:EB:D6:24:CC:1F:60:07:54 X509v3 Authority Key Identifier: keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b5:62:96:df:ee:62:00:21:9d:3b:77:7e:de:34:70:f8:f9: 05:c0:21:de:75:e8:bb:63:fd:39:12:c7:1f:fc:b9:3c:6d:e7: a7:3c:40:88:10:17:f6:7e:6a:fa:e6:d1:ca:d4:ef:65:21:09: 30:e0:f0:97:a5:28:48:19:2c:12:a4:bc:78:c8:97:a5:ef:41: 59:fe:b7:f1:47:6a:a5:a6:8d:68:47:7f:1b:a3:b4:0f:d8:78: 88:b7:02:ff:6b:f0:a7:ff:4c:da:08:41:0d:4d:ee:f1:de:2b: 14:45:a3:55:72:59:f8:d3:86:78:90:9f:73:ba:59:34:e7:a5: 36:e7:17:2f:6b:c2:cb:d5:be:bc:8a:3e:b8:e0:fc:60:71:bc: 18:af:d4:ff:5d:1d:fe:73:ac:08:3a:53:8c:d7:97:5e:f9:85: 43:a9:4c:3c:80:b5:9f:be:04:7a:44:63:81:89:4e:50:00:2e: bd:98:f6:a7:ee:4e:73:dd:5b:25:18:a8:18:ea:1b:fa:e0:00: 4c:19:df:83:a3:f2:80:33:06:da:be:58:57:67:cc:27:be:3a: 72:de:e3:23:d0:32:b0:97:5e:de:39:3e:d1:6f:ff:30:a4:db: fe:1b:51:49:90:f4:67:5e:46:35:ce:e6:90:d4:57:b5:03:9a: 05:be:9e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IEp3NHhxU7EhHP58c7xUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2 MjEwMWQwHhcNMjUxMjE5MDEwMTI5WhcNMjUxMjIwMDEwMTI5WjAzMTEwLwYDVQQD EygwMDUwYWE1MjNjZWZkZTk0M2FiNzY2MzdlYmQ2MjRjYzFmNjAwNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ1Tcu6N9NtTO9JA2qfXBal7ymDW r4l6QG+C6KQ5cs4YgtNV/JCXU0KYC4FEHHtlnxpreAVvmWcAedPsMXM1on3b9R85 uIoCaUOsYz6+1ikbQ35nrHb7ZstQ0r+K7rmH8v4zKWJd7+kqTVUcyHMpWo3oaNfT D2S/7fISogmwlaq8EJtxY5fWgK/VzpQ89y1gY9EHg8qiQT8K892ZfCulvcL1ZKNy wGnFYWGVG7e+yCg30FpOUq98eJx/H6BxaZumoDxbQ+7zp1Bu7Lr1PNS+Rb0ULIyO CpjTcV/IRGxuAiiiumxx7Rqw8cTvY7eZ1lYPZtAN6JscqkIhF9lnVXfCFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABQqlI8796UOrdmN+vWJMwfYAdUMB8GA1UdIwQY MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt ZmM1Y2M2NGRiNzQ5LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5 LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArVilt/u YgAhnTt3ft40cPj5BcAh3nXou2P9ORLHH/y5PG3npzxAiBAX9n5q+ubRytTvZSEJ MODwl6UoSBksEqS8eMiXpe9BWf638UdqpaaNaEd/G6O0D9h4iLcC/2vwp/9M2ghB DU3u8d4rFEWjVXJZ+NOGeJCfc7pZNOelNucXL2vCy9W+vIo+uOD8YHG8GK/U/10d /nOsCDpTjNeXXvmFQ6lMPIC1n74EekRjgYlOUAAuvZj2p+5Oc91bJRioGOob+uAA TBnfg6PygDMG2r5YV2fMJ746ct7jI9AysJde3jk+0W//MKTb/htRSZD0Z15GNc7m kNRXtQOaBb6eEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:24 2025 by rpki-client